Richland Source65%
Russian natives indicted in Ohio court for international cybercrimes resulting in $62M in losses to victims 48%
By United States Attorney's Office Northern District of Ohio73%
7/21/2026, 6:33:35 PM
BS Summary: This article contains 20 faulty reasoning types, including Appeal to Emotion, Availability Heuristic, and Confirmation Bias, with Negativity Bias as the most egregious example at 21.4% saturation with 222 hits. Analysis detected 1,502 faulty-reasoning hits from 1,037 analyzed words, generating a BS Score of 49.4% and a BS Rank of 48% (11,025 of 21,198 articles). This article is better (less manipulative) than 52.00% of the article peer group.
CLEVELAND – The U.S.
Attorney’s Office for the Northern District of Ohio has announced the unsealing of an indictment charging three Russian nationals for their respective roles in malicious cyber activities against U.S. critical infrastructure affecting victims in 21 states and in several countries, with losses amounting to tens of millions of dollars.
These charges are the result of a seven-year-long investigation.
A federal grand jury returned an indictment in December 2024 charging the following defendants with Conspiracy to Commit and Aid and Abet Computer Fraud, Conspiracy to Commit Wire Fraud, Wire Fraud, and Conspiracy to Commit Money Laundering:
* Alexander Alexandrovich Volosovik, 43, of St.
Petersburg, Russia.
* Kirill Andreevich Zatolokin, 34, of St.
Petersburg, Russia.
* Yulia Vladimirovna Pankova, 29, of St.
Petersburg, Russia.
* Media Land, LLC, headquartered in St.
Petersburg, Russia.
* ML.Cloud, LLC, headquartered in St.
Petersburg, Russia.
In addition to the unsealing of the indictment, the U.S.
Department of State’s Rewards for Justice (RFJ) program announced that it is offering a reward of up to $10 million and possible relocation for actionable information on foreign government-linked associates of Pankova, Volosovik and Zatolokin, their malicious cyber activities, or foreign government-linked use of Media Land or ML.Cloud.
U.S. sanctions were announced in November 2025 against the indicted defendants and companies.
“From their overseas haven, these defendants ran the criminal infrastructure that powered attacks on critical institutions across our nation,” said Assistant Attorney General A.
Tysen Duva of the Justice Department’s Criminal Division.
“Their actions put the American public at risk.
We will continue to dismantle these networks and protect our critical infrastructure from cybercriminals at home and abroad.”
“The victims in this case are not only in Ohio, but also in 20 other states across the country, touching every aspect of Americans’ lives.
They include banks, schools, government entities, hospitals, and media companies.Together with our international partners, we will aggressively combat the efforts of individuals who hide behind computers anywhere in the world who seek to profit and wreak havoc by targeting the infrastructures that support our communities.”
<em>United States Attorney David M.
Toepfer for the Northern District of Ohio.</em>
“With today’s actions, the FBI and our partners are striking at the core services that cybercriminals rely on to attack U.S. critical infrastructure,” said Assistant Director Brett Leatherman of FBI Cyber Division.
“Media Land has enabled malicious activity causing tens of millions in losses and impacting victims across 21 states and multiple countries.
This is another step in our broader campaign to shrink the space in which these actors can operate, forcing them to work harder, take greater risks, and lose the anonymity they depend on.”
According to allegations in court documents, Media Land, LLC, owned by Volosovik, and ML.Cloud, owned by Pankova, at the time of investigation and indictment, were both based in St.
Petersburg and provided infrastructure for computer servers and related internet services.
Media Land’s infrastructure also operated out of multiple countries including China, Finland, the Netherlands, and the United States.
These businesses provided what are known as “bulletproof hosting” services for client users to not only conduct criminal activities, but also to evade detection by law enforcement.
Such businesses knowingly and intentionally market and/or lease their infrastructure to cybercriminals.
According to the indictment, Media Land and ML.Cloud provided infrastructure and tech support to criminal client co-conspirators with the means to infect victim computers with malware and ransomware and then extorted those victims for money and cryptocurrency.
Other computer-based crimes facilitated by Media Land and ML.Cloud included supporting criminal marketplaces, fraudulent domain registrations, and providing the platform from which to launch phishing and brute force attacks.
“Today’s announcement underscores the importance of global partnerships and international collaboration, especially in a borderless world riddled with cyber criminals,” said FBI Cleveland Special Agent in Charge Josh DelManzo.
“The methods used by these bad actors, including ransomware, malware, phishing and other cyber activity, serves as a reminder that whether for business or personal use, when you are online, criminal networks will stop at nothing to hack, attack, share, or sell your information for their own greed, gain, and profit.
The FBI and its partners will continue to identify and cripple criminal networks and freeze their infrastructures to reduce or remove the threats to the public and further protect trusting individuals and companies.”
“The Department of State is committed to countering malicious cyber activities that threaten U.S. critical infrastructure and our national security,” said Deputy Assistant Secretary and Assistant Director of the U.S.
Department of State’s Diplomatic Security Service for Cyber & Technology Security Gharun Lacy.
“We remain relentless in our efforts to generate information that helps our law enforcement partners disrupt campaigns against our national interest and bring these malicious cyber actors to justice.”
Investigators found that dozens of victim organizations were targeted by criminal groups who used Media Land’s and ML.Cloud’s services.
Victim entities included banks, schools, government entities, hospitals, and media companies.
The victims were located throughout the U.S. and across the world.
In the Northern District of Ohio, victims were located in: Akron, Brookfield, Canton, Cleveland, Elyria, Medina, Findlay, Solon, and Valley View.
At least 20 other states were also affected including: California, Delaware, Florida, Georgia, Illinois, Louisiana, Maryland, Massachusetts, Michigan, Minnesota, New Hampshire, New York, North Carolina, Pennsylvania, Tennessee, Texas, Utah, Virginia, Washington state, and Wisconsin.
International victims were located in Australia, the European Union, the United Arab Emirates, Canada and the United Kingdom.
“Cybercriminals persist in their efforts to disrupt networks and systems while remaining undetectable and difficult to trace.
Bulletproof hosting providers are increasingly becoming common accomplices, posing an imminent and significant risk to the resilience and safety of critical systems and services,” said CISA Industry Team Operations Manager, Nicholas Colella.
“CISA’s global collaboration with governments, law enforcement, and the private sector is making it harder for cybercriminals to remain anonymous online.
Our joint BulletProof Defense guide provides actionable information to reduce the effectiveness of this nefarious infrastructure and risk to this threat.”
Anyone with information should contact Rewards for Justice via its Tor-based tips-reporting channel at: he5dybnt7sr6cm32xt77pazmtm65flqy6irivtflruqfc5ep7eiodiad.onion (Tor browser required).
More information is available on the RFJ website at RewardsForJustice.net.
Speakers
1speaker4.6%attributed speech989writer words
Voice mapSelect a segment to jump to its words
Selected voice
100%flagged-word coverageRewards for Justice
48 attributed words100% of attributed speech75% writer coverage
Attribution is sentence-level. Pattern percentages are calculated only from words assigned to that voice.
Loading…
Loading…
Loading…
Analysis
Hover over highlighted words in the article to view the associated bias or fallacy analysis.